Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: 5aDazBXO/nwKbhOO2MyS5tAAM6PlUvuNF7hePWRaliY=
Subject key identifier: 37:79:F1:FA:14:AC:D3:D3:1D:1D:C3:7C:DB:60:A3:D8:5B:78:5D:A4
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 0196B3D914D3B1FC195E92BAD38C7EB10995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 07:01:10 +0000
Manifest this update: Fri 09 May 2025 07:01:10 +0000
Manifest next update: Sat 10 May 2025 07:01:10 +0000
Files and hashes: 1: GDkJM0lrFwKj0pA-1b6WqbIKy5U.roa (hash: AJLBt3MjV7p+Y7RRJ8TCQIrAHHyRPR0203cHSf77IXw=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: 5dt1sJwoKZUf+abNNOmduJsnC4OaCxWCmJYFAiUnVPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:14:d3:b1:fc:19:5e:92:ba:d3:8c:7e:b1:09:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: May 9 07:01:10 2025 GMT
Not After : May 10 07:01:10 2025 GMT
Subject: CN=3779f1fa14acd3d31d1dc37cdb60a3d85b785da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:35:ff:dd:7e:b7:87:9d:44:a7:df:33:a1:
3d:ee:10:09:07:b5:d4:c7:d0:1b:08:d4:6b:4c:e8:
9d:73:4b:dd:42:db:e3:7d:d7:ab:36:6c:20:ff:89:
92:4b:ca:19:9b:6b:70:6b:06:c9:30:a0:8d:46:af:
cd:2b:da:7f:f0:d4:17:dd:d5:e8:8d:10:42:fc:ad:
de:18:e9:a4:69:32:4d:1b:51:77:4c:73:91:04:80:
b4:58:df:59:dc:63:bd:4e:2c:7d:99:26:21:33:5d:
5c:7c:c0:28:97:0b:98:79:3d:e6:c7:52:1d:ba:c3:
dd:41:fd:4d:57:b5:4d:56:97:f2:53:0a:74:be:14:
df:80:3c:7f:fa:49:ce:e8:05:7e:51:45:a9:de:ee:
c3:6b:90:4e:2d:c9:c9:1d:f4:3a:4e:e3:f9:f5:25:
3f:c8:24:6d:ea:a6:13:e9:61:ec:12:c7:bc:f6:cd:
b6:73:a6:34:96:4e:fd:39:8a:7c:74:86:e4:0d:ac:
0a:8c:16:53:99:85:ee:3b:4b:58:ca:ce:5a:13:20:
aa:c2:67:0e:3b:de:82:72:67:56:f0:03:48:50:a0:
06:03:f4:56:04:5c:52:92:6a:c9:d3:a1:a8:ce:e5:
ed:e6:e3:07:6b:bb:94:43:5a:11:93:65:0a:62:af:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:79:F1:FA:14:AC:D3:D3:1D:1D:C3:7C:DB:60:A3:D8:5B:78:5D:A4
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:41:44:55:b0:13:49:a3:da:ae:39:54:a0:81:38:31:ee:40:
cc:73:c4:17:86:03:4b:12:3e:b5:14:b4:68:47:73:41:6d:e6:
76:11:cb:2d:e5:11:f8:79:90:df:3f:b9:78:78:a3:6f:bf:1b:
19:8b:5f:50:cb:02:10:e4:8f:92:02:60:d7:35:78:57:b1:75:
bc:77:5f:12:c9:9c:58:9a:fa:49:4c:9d:a1:79:25:2e:95:8b:
ed:86:c2:84:94:ce:fa:07:98:f9:fe:0a:f3:0d:a5:ae:0c:ab:
ac:0e:45:76:6c:4f:e6:14:31:22:f9:d6:18:a8:82:da:73:42:
e4:b4:a4:5a:ad:7b:b7:1e:3d:09:4c:ed:d8:b6:4c:91:8f:c7:
4f:5e:a9:11:5a:9e:4d:33:01:39:2c:66:0c:14:0e:46:95:1b:
64:91:b8:db:e8:19:e8:e6:fa:20:96:cb:b9:e3:6c:5d:67:85:
b5:7d:22:b4:b3:dd:9e:08:15:f2:34:f7:87:97:6e:9d:e6:a6:
4f:98:ab:4f:eb:25:64:6d:50:d8:6f:ab:1d:20:33:73:c5:a5:
e5:d1:22:67:15:1c:e6:01:e2:1c:2a:3c:7d:f3:bf:24:f8:0e:
48:d4:d3:09:81:f6:61:a1:c4:25:94:15:ec:18:15:62:2b:74:
0c:78:eb:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2RTTsfwZXpK604x+sQmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNDg5ZmUxYzdlMjBhMGIwYzYzODQyYzQ1YzE2YzU3NjMx
Nzg1ZDMwHhcNMjUwNTA5MDcwMTEwWhcNMjUwNTEwMDcwMTEwWjAzMTEwLwYDVQQD
EygzNzc5ZjFmYTE0YWNkM2QzMWQxZGMzN2NkYjYwYTNkODViNzg1ZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6k1/91+t4edRKffM6E97hAJB7XU
x9AbCNRrTOidc0vdQtvjfderNmwg/4mSS8oZm2twawbJMKCNRq/NK9p/8NQX3dXo
jRBC/K3eGOmkaTJNG1F3THORBIC0WN9Z3GO9Tix9mSYhM11cfMAolwuYeT3mx1Id
usPdQf1NV7VNVpfyUwp0vhTfgDx/+knO6AV+UUWp3u7Da5BOLcnJHfQ6TuP59SU/
yCRt6qYT6WHsEse89s22c6Y0lk79OYp8dIbkDawKjBZTmYXuO0tYys5aEyCqwmcO
O96CcmdW8ANIUKAGA/RWBFxSkmrJ06GozuXt5uMHa7uUQ1oRk2UKYq+ZGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDd58foUrNPTHR3DfNtgo9hbeF2kMB8GA1UdIwQY
MBaAFG5In+HH4goLDGOELEXBbFdjF4XTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9mODQxOTgtMmJkYi00NDdkLTg3MjIt
ZDg4NjkzMTE0OTlhLzEvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9mODQxOTgtMmJkYi00NDdkLTg3MjItZDg4NjkzMTE0OTlh
LzEvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEFEVbAT
SaParjlUoIE4Me5AzHPEF4YDSxI+tRS0aEdzQW3mdhHLLeUR+HmQ3z+5eHijb78b
GYtfUMsCEOSPkgJg1zV4V7F1vHdfEsmcWJr6SUydoXklLpWL7YbChJTO+geY+f4K
8w2lrgyrrA5FdmxP5hQxIvnWGKiC2nNC5LSkWq17tx49CUzt2LZMkY/HT16pEVqe
TTMBOSxmDBQORpUbZJG42+gZ6Ob6IJbLueNsXWeFtX0itLPdnggV8jT3h5duneam
T5irT+slZG1Q2G+rHSAzc8Wl5dEiZxUc5gHiHCo8ffO/JPgOSNTTCYH2YaHEJZQV
7BgVYit0DHjrbg==
-----END CERTIFICATE-----
Generated at Fri May 9 17:20:01 2025 by rpki-client